$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa File: 441364f7-b81f-3438-8e4e-5021ad9b611e.roa (raw, json) Hash identifier: 8QcCnLGlxprlv+dZYa1GAqFD+FgIBhQCTBuqmN3ssEM= Subject key identifier: F8:D4:55:C8:C8:8E:D7:AA:93:41:2B:39:E1:3D:AE:7E:4A:84:D1:E7 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AC2E0E42D95FE0A1B34551400 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 399629 IP address blocks: 192.153.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e4:2d:95:fe:0a:1b:34:55:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=0cb99343-6ee4-4c1d-a4f7-4ced8f2a218c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:35:83:e9:d4:41:49:84:93:5d:c7:24:7c: 28:15:0d:b5:75:51:2a:21:d1:b0:2c:ce:ed:d1:c2: 90:90:64:e8:f1:56:e2:16:fe:90:f0:9c:cf:f3:85: e1:43:7e:d3:03:d4:bf:85:04:de:36:b0:1e:d3:74: 17:bf:e0:f4:6b:4c:8f:d8:b2:80:80:4f:af:56:87: 4d:af:84:5b:94:d4:3d:ab:01:5a:7c:04:6b:66:f5: cc:14:c9:1d:53:11:42:09:18:d9:3c:7d:e1:8f:ad: 04:89:49:9b:ca:ae:7d:4d:e9:f1:40:d4:dd:fb:d9: 74:23:1c:f6:69:b4:d1:88:e1:ea:cf:67:10:d2:b7: 52:45:d4:2a:8c:af:da:7c:c2:d0:c4:c8:31:84:30: ef:41:54:12:07:4f:c5:b3:1b:06:c0:3e:09:8b:c7: 70:ce:3c:6e:30:6b:7a:fc:c2:ec:e4:32:d2:a5:7c: 88:1c:b3:76:1d:de:06:2f:30:b4:3d:bd:bc:a0:c5: d6:cc:2a:e7:ab:ea:c1:c3:96:31:c5:a9:f2:44:97: 17:fa:59:42:4e:ac:fd:29:c8:92:d4:18:e8:bc:d7: 4b:fe:17:e1:35:55:27:be:26:07:cb:07:84:88:58: ea:78:a9:80:2e:d5:fa:14:46:0d:96:f3:17:7d:bc: 4b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D4:55:C8:C8:8E:D7:AA:93:41:2B:39:E1:3D:AE:7E:4A:84:D1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 192.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d8:5f:9e:2f:e0:0d:70:b1:28:fb:74:a3:4e:e1:63:58:38: 59:51:fe:de:70:1c:f3:07:1c:66:4a:07:e5:0a:2d:61:0b:fb: 5c:e2:7b:4a:c3:d3:a7:ef:3f:6d:c6:fc:5a:f5:3f:23:e8:e0: 90:67:e8:97:96:d0:ae:36:35:b3:4e:74:26:7a:1d:a3:56:d1: 95:fc:6c:9b:13:ba:c0:63:79:19:b8:2e:b2:82:eb:ab:d7:fb: a0:68:dc:06:02:aa:c0:6a:2b:2d:61:0c:cf:d2:cb:07:e8:b0: cc:f1:32:b0:5c:fe:bc:04:14:5e:fe:e7:b8:1f:50:31:32:1b: 92:4f:c4:0c:59:6c:8f:d3:6a:b1:bd:fc:a8:04:ca:2f:65:65: 6e:4f:bc:7e:47:57:63:9a:0b:aa:87:e5:56:7b:b3:ec:12:8a: c4:8f:84:70:9b:62:8f:b7:b5:e8:ce:b0:95:9e:30:d9:ef:82: 1c:9b:60:f1:e9:84:3f:b8:e8:0b:b4:b6:aa:3d:81:b8:2c:f6: 3a:de:36:3c:a5:80:b4:7a:b8:d2:72:29:92:cd:ad:80:63:80: 68:3a:b1:a0:90:17:e5:c4:38:5f:b2:d2:18:90:06:43:81:e7: 26:ff:88:b7:85:cd:f2:ff:0c:fb:c7:d4:3e:11:9f:77:fd:49: 38:4c:14:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OQtlf4KGzRVFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGNiOTkzNDMtNmVlNC00YzFkLWE0ZjctNGNlZDhmMmEyMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjQ1g+nUQUmEk13HJHwoFQ21dVEqIdGwLM7t 0cKQkGTo8VbiFv6Q8JzP84XhQ37TA9S/hQTeNrAe03QXv+D0a0yP2LKAgE+vVodN r4RblNQ9qwFafARrZvXMFMkdUxFCCRjZPH3hj60EiUmbyq59TenxQNTd+9l0Ixz2 abTRiOHqz2cQ0rdSRdQqjK/afMLQxMgxhDDvQVQSB0/FsxsGwD4Ji8dwzjxuMGt6 /MLs5DLSpXyIHLN2Hd4GLzC0Pb28oMXWzCrnq+rBw5YxxanyRJcX+llCTqz9KciS 1BjovNdL/hfhNVUnviYHyweEiFjqeKmALtX6FEYNlvMXfbxLtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjUVcjIjteqk0ErOeE9rn5KhNHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDQxMzY0ZjctYjgxZi0z NDM4LThlNGUtNTAyMWFkOWI2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDYX54v4A1wsSj7dKNO4WNYOFlR/t5wHPMHHGZKB+UKLWEL+1zie0rD 06fvP23G/Fr1PyPo4JBn6JeW0K42NbNOdCZ6HaNW0ZX8bJsTusBjeRm4LrKC66vX +6Bo3AYCqsBqKy1hDM/SywfosMzxMrBc/rwEFF7+57gfUDEyG5JPxAxZbI/TarG9 /KgEyi9lZW5PvH5HV2OaC6qH5VZ7s+wSisSPhHCbYo+3tejOsJWeMNnvghybYPHp hD+46Au0tqo9gbgs9jreNjylgLR6uNJyKZLNrYBjgGg6saCQF+XEOF+y0hiQBkOB 5yb/iLeFzfL/DPvH1D4Rn3f9SThMFHM= -----END CERTIFICATE-----Generated at Thu Aug 21 10:26:07 2025 by rpki-client